Mind the Bridge - A New Attack Model for Hybrid Mobile Applications
Hack In The Box Security Conference via YouTube
The Fastest Way to Become a Backend Developer Online
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a groundbreaking attack model for hybrid mobile applications in this conference talk from the Hack In The Box Security Conference. Delve into the world of "Javascript bridges" and uncover a novel class of vulnerabilities in hybrid apps that combine web and native mobile app features. Learn about three vulnerability models that can lead to attacks, bypassing existing validation and restriction technologies. Gain insights into the embedded browser architecture and understand the root cause of these security risks. Discover a new automated tool for vetting hybrid apps and examine a practical mitigation measure called "RichInterface" implemented in a custom embedded browser. Evaluate the effectiveness and scalability of this solution through real-world app examples, presented by an experienced security researcher with expertise in browser and Android application security.
Syllabus
#HITB2021AMS D2T1 - Mind The Bridge: A New Attack Model For Hybird Mobile Applications - Ce Qin
Taught by
Hack In The Box Security Conference